CVE-2023-6728

LOW

3.3

Description

Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content.

CVE Details

CVSS v3.1 Score3.3

SeverityLOW

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published10/17/2024

Last Modified11/5/2024

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-326

References

https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-6728/(b48c3b8f-639e-4c16-8725-497bc411dad0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.